3e891c21cf39d2f8597009df462cdb3b_JaffaCakes118 | Triage

Sharing

General

Target

3e891c21cf39d2f8597009df462cdb3b_JaffaCakes118
Size

9KB
MD5

3e891c21cf39d2f8597009df462cdb3b
SHA1

5cb5aa6567fe2c21e1f2297987eb20dfaf14bbd4
SHA256

d8d7b898a9ac4ba4ab6475526a0d46ca915c7e08f9eb905660eed0a3f2e8658c
SHA512

3eed78b2194e491ec3de436260b97cec78ce660c6af4020856281fd4d6eea165c41e840467c115f9748009c6aecf2b72cd99d70d37ff1305501ae7c07c7f24fa
SSDEEP

192:ArBuxWigayaE13a/GM0wxzWsrWY7M8iLlA:aUo/w/F0YzWsrWY7M8iLlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e891c21cf39d2f8597009df462cdb3b_JaffaCakes118

Files

3e891c21cf39d2f8597009df462cdb3b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8cfb5639a044d231d1b5be8bc2f596cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
IsBadReadPtr
VirtualFree
VirtualAlloc
GetProcessHeap
GetCommandLineA

user32

wsprintfA
MessageBoxA

Exports

Exports

strcat

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 555B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 372B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

7poGE
Size: 548B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SPYV
Size: 61B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE